Product:
SimStudio
Summary
On SimStudio versions below 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions. An attacker can leverage these endpoints to connect to any reachable MongoDB instance and perform unauthorized operations including reading, modifying, and deleting data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2026-3431 |
Exploitation
To exploit this vulnerability, an attacker can send crafted requests to the MongoDB tool endpoints of SimStudio. Since these endpoints do not require authentication or impose host restrictions, the attacker can connect to any accessible MongoDB instance and execute unauthorized commands, potentially leading to data breaches or loss.
Affected Products
- SimStudio versions below 0.5.74: Vulnerable to unauthorized access to MongoDB instances.
Mitigation
To mitigate this vulnerability, users should upgrade to SimStudio version 0.5.74 or later, which addresses the issue by implementing proper authentication and host restrictions for the MongoDB tool endpoints.